CVE-2025-27550CWE-497

IBM Jazz Reporting Service Information Disclosure

Low · published February 4, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-02-04T21:07Z
EPSS history
Timeline
  • 04 FEB 21:07Z
    IBM Jazz Reporting Service Information Disclosure
    cvelistv5